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DETAILED ACTION 

1 . A request for continued examination under 37 CFR 1.114, including the fee set forth in 
37 CFR 1 .17(e), was filed in this application after final rejection. Since this application is 
eligible for continued examination under 37 CFR 1.114, and the fee set forth in 37 CFR 1.17(e) 
has been timely paid, the finality of the previous Office action has been withdrawn pursuant to 
37 CFR 1.1 14. Applicant's submission filed on April 12, 2010 has been entered. 

2. Applicant's arguments have been considered but have been found not persuasive. 

Applicant's Arguments 

3. Applicant's arguments: 

I. Applicant argues that the cited prior art does not disclose "a data interception unit 
configured to intercept inputs from a user that are directed to an application, wherein 
the data interception unit is configured to passively collect mouse data generated in 
response to the user, the mouse data including mouse movement data or mouse click 
data" 

II. Applicant argues that the cited prior art does not disclose as per claim 27, "wherein the 
behavior comparison unit is configured to produce the identity result based on a 
histogram of mouse movement directions" 
III. Applicant argues that the cited prior art does not disclose as per claim 28 "wherein the 
signature for the user is developed based on a distribution of traveled distances." 



Examiner's response to applicant's arguments 
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4. Applicant's arguments/ amendments with respect to pending claims 1-5, 7-12, 14, and 
19-28 filed April 12, 2010, have been fully considered but have been found not persuasive. 
In response to applicant's arguments: 

I. Brown collects data from a user and authenticates user based on data collected. An 
application is running which asks the user for input hence the data is directed towards 
an application. Applicant admits Matchett discloses a thumbscanning or hand 
geometry mouse. The data is collected using the mouse and concerning certain 
properties of the mouse hence it is "mouse data". Matchett also discloses data is 
collected passively in column 13 lines 14-28. Passively collecting data is transparent to 
the user, see Matchett column 12 lines 62-63 user does not need to perform any actions 
that he would not normally perform. By collecting data passively and not requiring user 
to perform any additional actions implies that the collection of data is transparent. 
Matchett does not disclose the data collected is mouse movement data however as 
explained in previous office action Akiyama collects data based on mouse movement. 
II. Applicant's arguments are moot based on new grounds of rejection which were 

necessitated by applicant's amendment. 
III. Storing multiple instances of user input for user authentication is creating a distribution 
and collecting data which respect to mouse movement is collecting data based on 
traveled distance. - Brown, column 2 lines 20-22, vectors constructed for purifying the 
samples are behavioral analysis units since they contain behavioral data, And Akiyama, 
figure 8 and column 1 1 lines 42-46, the input device is a mouse and the tracks of the 
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mouse movement are detected, tracks are the path of the mouse and hence are the 
direction of movement. 

Claim Rejections - 35 USC S 103 

5. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 

6. Claims 1-2, 4-5, 7-12, 19-26 are rejected under 35 U.S.C. 103(a) as being unpatentable 
by Brown et al. (U S Patent Number 5,557,686) in view of Matchett (US Patent # 5,229,764) and 
further in view of Akiyama et al. (US Patent Number 5,768,387). 

As per claims 1, 25 and 26, Brown discloses: a behavioral biometrics based user 
verification system for use with an input device, said system comprising a data interception unit 
configured to intercept inputs from a user that are directed to an application - Brown, column 2 
lines 15-19, collecting samples containing typing characteristics of an authorized user based on 
key press times and key release times is a behavioral biometrics based system which intercepts 
data from a user, data is collected and then user is asked to enter data, an application is running 
which asks the user for input hence the data is directed towards an application, 

a behavior analysis unit operatively coupled to said data interception unit - Brown, 
column 2 lines 20-22, vectors constructed for purifying the samples are behavioral analysis units 
since they contain behavioral data, 
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and a behavior comparison unit operatively coupled to said interception unit, wherein 
said system translates behavioral biometrics information into representative data. - Brown, 
column2 lines 28-29, the neural network trained to output whether an input is from an authorized 
user is representative data of biometric information, 

stores and compares different results, and outputs a user identity result associated with 
user authorization of the user. - Brown, column 2 lines 30-32 and 38-38, the user typing the 
previously determined keystroke sequence into the neural network then having the neural 
network determine whether the user is authorized, is storing and comparing the different results 
and outputting the user identity result. 

But fails to disclose the input device is a mouse and wherein the data interception unit is 
configured to passively collect mouse data generated in response to the user, the mouse data 
including mouse movement data or mouse click data; 

However, Matchett discloses that the input device is a mouse and wherein the data 
interception unit is configured to passively collect mouse data generated in response to the user, 
the mouse data including mouse movement data or mouse click data; - Matchett, figure 1 1 and 
column 13, lines 12-28, data input unit is a mouse which is a device used for collecting data 
passively 

It would have been obvious to one of ordinary skill in the art at the time of the invention 
to incorporate the passively collecting mouse movement data method of Matchett with the 
behavioral biometric based system of Brown because having a continuous authentication method 
makes theft more difficult and less likely since it continuously checks up on registered user - 
Matchett, column 2, lines 59-63, column 3 lines 2-3. 
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But Brown in view of Matchett does not explicitly disclose that the collected data is 
mouse movement data or mouse click data 

However Akiyama discloses wherein said data interception unit is configured to identify 
data based on mouse movement - Akiyama, figure 8 and column 1 1 lines 42-46, the input device 
is a mouse and the tracks of the mouse movement are detected, tracks are the path of the mouse 
and hence are the direction of movement. 

It would have been obvious to one of ordinary skill in the art at the time of the invention 
to modify the teaching of Brown with the teaching of Akiyama in order to provide input devices 
as a keyboard or a mouse, or both as pointed out in Akiyama. - Akiyama, column 1 1 lines 39-41, 
input devices can be keyboard and mouse 

As for claim 25, mouse data collected passively without user knowledge, is mouse data 
collection initiated, collected and terminated passively if any of the steps are not passive the 
collection of the mouse data is not passive. 

As for claim 26, mouse data collected passively without user knowledge, is mouse data 
collection initiated, collected and terminated passively if any of the steps are not passive the 
collection of the mouse data is not passive. Passively collecting data is transparent to the user. 

As per claim 2, Brown in view of Matchett and further in view of Akiyama discloses: 
The user verification system of claim 1 , wherein said system is suitably configured for real-time 
monitoring - Brown, column 13 lines 52-55, system notifying a system operator that user has not 
passed keystroke is real-time monitoring 
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As per claim 5, Brown in view of Matchett and further in view of Akiyama discloses: the 
limitations of claim 4, wherein said data interception unit is further configured to characterize 
movement based on at least one of average speed, average traveled distance, and direction of 
movement. - Akiyama, figure 8 and column 1 1 lines 42-46, the input device is a mouse and the 
tracks of the mouse movement are detected, tracks are the path of the mouse and hence are the 
direction of movement. 

As per claim 7, Brown in view of Matchett and further in view of Akiyama discloses: the 
limitations of claim 1, wherein said data interception unit is further configured to identify action 
from a mouse as one of drag and drop, point and click, mouse movement, and silence, such that 
in use, said system receives data from a mouse - Akiyama, figure 8 and column 1 1 lines 42-46, 
the input device is a mouse and the tracks of the mouse movement are detected, tracks are the 
path of the mouse and hence are the direction of movement. 

As per claim 8, Brown in view of Matchett and further in view of Akiyama discloses: the 
limitations of claim 1 but fails to disclose expressly the limitation in claim 7, wherein said data 
interception unit is further configured to characterize movement based on at least one of average 
speed, average traveled distance, and direction of movement. - Akiyama, figure 8 and column 1 1 
lines 42-46, the input device is a mouse and the tracks of the mouse movement are detected, 
tracks are the path of the mouse and hence are the direction of movement. 
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As per claims 20, Brown in view of Matchett and further in view of Akiyama discloses 
the system of claim 1, wherein the behavior comparison unit is configured to produce the user 
identity result based on mouse movement speed compared to traveled distance, average speed 
per direction of movement, a distribution of movement directions, average speed with respect to 
action type, a distribution of actions, a distribution of traveled distance, and a distribution of 
movement elapsed time. - Akiyama, figure 8 and column 1 1 lines 42-46, the input device is a 
mouse and the tracks of the mouse movement are detected, tracks are the path of the mouse and 
hence are the direction of movement, It would be obvious for one skilled in the art at the time of 
the invention to use any combination calculations related to the mouse movement and a factor. 

As per claim 24, Brown in view of Matchett and further in view of Akiyama discloses the 
system of claim 1, wherein the behavior analysis unit is configured to establish a user signature 
based on a plurality of sessions in an enrollment mode. -Brown, column2 , lines 12-25, multiple 
user samples are used in authentication process. 

As per claim 9, Brown discloses: A method of characterizing a user comprising the steps 
of: receiving data associated at a user application; passively intercepting at least a portion of the 
received data and forwarding the intercepted data to a behavioral processing unit; processing the 
intercepted portion so as to develop a signature for a user. - Brown, column 2 lines 15-19, a 
keyboard is a motion-based input device which is used to collect data, an application is running 
which asks the user for input hence the data is directed towards an application, AND Brown 
column 2 lines 20-22, vectors constructed for purifying the samples are behavioral analysis units 
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since they contain behavioral data and column 2 lines 28-29, the neural network trained to output 
whether an input is from an authorized user is representative data of biometric information, AND 
Brown column 2 lines 30-32 and 38-38, the user typing the previously determined keystroke 
sequence into the neural network then having the neural network determine whether the user is 
authorized is a model of users signature. 

But fails to disclose that the input device is a mouse and data collected passively is mouse 
movement data. 

However, Matchett discloses that the input device is a mouse - Matchett, figure 1 1 and 
column 13, lines 12-28, data input unit is a mouse which is a device used for collecting data 
passively 

It would have been obvious to one of ordinary skill in the art at the time of the invention 
to incorporate the passively collecting mouse movement data method of Matchett with the 
behavioral biometric based system of Brown because having a continuous authentication method 
makes theft more difficult and less likely since it continuously checks up on registered user - 
Matchett, column 2, lines 59-63, column 3 lines 2-3. 

But Brown in view of Matchett does not disclose that the collected data is mouse 
movement data 

However Akiyama discloses: wherein said data interception unit is configured to identify 
data based on mouse movement - Akiyama, figure 8 and column 1 1 lines 42-46, the input device 
is a mouse and the tracks of the mouse movement are detected, tracks are the path of the mouse 
and hence are the direction of movement. 
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It would have been obvious to one of ordinary skill in the art at the time of the invention 
to modify the teaching of Brown with the teaching of Akiyama in order to provide input devices 
as a keyboard or a mouse, or both as pointed out in Akiyama. - Akiyama, column 1 1 lines 39-41, 
input devices can be keyboard and mouse 

As per claim 4 and 22, Brown in view of Matchett and further in view of Akiyama 
discloses: the limitations of claim 1 and 9 respectively, wherein said data interception unit is 
configured to identify data based on mouse movement and is not associated with a mouse click - 
Matchett, figure 1 1 and column 13, lines 12-28, data input unit is a mouse and passively collects 
data 

wherein said data interception unit is configured to identify data based on mouse 
movement between first and second locations, wherein movement between the first and second 
locations is not associated with a mouse click - Akiyama, figure 8 and column 1 1 lines 42-46, the 
input device is a mouse and the tracks of the mouse movement are detected, tracks are the path 
of the mouse and hence are the direction of movement. 

As per claim 10, Brown in view of Matchett and further in view of Akiyama discloses: 
The method of claim 9, further comprising comparing said signature with a signature of an 
authorized user - Brown, column 2 lines 30-32 and 38-38, the user typing the previously 
determined keystroke sequence into the neural network then having the neural network 
determine whether the user is authorized is a model of users signature. 
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As per claim 11, Brown in view of Matchett and further in view of Akiyama discloses: 
The method of claim 10, further comprising filtering said data after processing and before 
developing the signature to reduce noise - Brown, column 4 lines 30-35, purifying users input 
files is filtering the processed data before modeling and reduces noise. 

As per claim 12, Brown in view of Matchett and further in view of Akiyama discloses: 
The method of any one of claims 11, further comprising collecting and processing and 
developing the signature in real-time - Brown, column 14 lines 7-18, continuously updating the 
users profile with new samples is a method which collects, processes and models data in real- 
time, modeling the data is the user signature. 

As per claims 14, Brown in view of Matchett discloses: the limitations of claim 9, 
wherein said collecting data further comprises characterizing movement based on at least one of 
average speed, average traveled distance, and direction of movement -Akiyama, figure 8 and 
column 1 1 lines 42-46, the input device is a mouse and the tracks of the mouse movement are 
detected, tracks are the path of the mouse and hence are the direction of movement. 

As per claim 19, Brown in view of Matchett and further in view of Akiyama the system 
of claim 1 , wherein the behavior comparison unit is configured to store user identities for a 
plurality of potential users, and the user identity result identifies the user from among the 
plurality of potential users. - Brown, column2, lines 16 and 17, plurality of users are authorized 
for system, i.e. authentication information is stored for multiple users of the system 
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As per claim 21, Brown in view of Matchett and further in view of Akiyama discloses the 
method of claim 9, wherein the signature for the user is developed based on movement speed 
compared to traveled distance, average speed per direction of movement, distribution of 
movement directions, average speed with respect to action type, a distribution of actions, a 
distribution of traveled distance, and a distribution of movement elapsed time. - Akiyama, figure 
8 and column 1 1 lines 42-46, the input device is a mouse and the tracks of the mouse movement 
are detected, tracks are the path of the mouse and hence are the direction of movement, It would 
be obvious for one skilled in the art at the time of the invention to use any combination 
calculations related to the mouse movement and a factor. 

As per claim 23, Brown in view of Matchett and further in view of Akiyama discloses the 
method of claim 9, wherein the behavioral biometric information from the mouse is obtained in a 
background process. - Matchett, figure 1 1 and column 13, lines 12-28, data input unit is a mouse 
which is a device used for collecting data passively, passively collecting data without user 
knowledge is performed as a background process else user will know about the process. 

As per claim 28, Brown in view of Matchett and further in view of Akiyama discloses the 
method of claim 9, wherein the signature for the user is developed based on a distribution of 
traveled distances. - Brown, column 2 lines 20-22, vectors constructed for purifying the samples 
are behavioral analysis units since they contain behavioral data, And Akiyama, figure 8 and 
column 1 1 lines 42-46, the input device is a mouse and the tracks of the mouse movement are 
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detected, tracks are the path of the mouse and hence are the direction of movement. Storing 
multiple instances of user input for user authentication is creating a distribution and collecting 
data which respect to mouse movement is collecting data based on traveled distance. 

7. Claim 27 is rejected under 35 U.S.C. 103(a) as being unpatentable by Brown in view of 
Matchett and further in view of Akiyama and Mizutome et al. (US Pre-Grant Publication NO: 
2002/0078447). 

As per claim 27, Brown in view of Matchett and further in view of Akiyama discloses the 
system of claim 1, 

But fails to disclose wherein the behavior comparison unit is configured to produce the 
identity result based on a histogram of mouse movement directions. 

However Mizutome discloses wherein the behavior comparison unit is configured to 
produce the identity result based on a histogram of data associated with input device. 

It would have been obvious at the time of the invention to modify the data collection 
system used for authorizing a user in Brown with the data collection system of storing the data in 
a histogram as taught by Mizutome because a histogram is a well known method for collecting 
and displaying data. 

8. Claim 3 is rejected under 35 U.S.C. 103(a) as being unpatentable over Brown in view of 
Matchett in further view of Akiyama and Boebert et al. (US Patent Number 5,596,718). 
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As per claim 3, Brown in view of Matchett and further in view of Akiyama discloses: the 
limitations of claim 2 

But fails to disclose further comprising secure communication protocols operatively 
couple to said data interception unit. 

Boebert discloses: further comprising secure communication protocols operatively couple 
to said data interception unit; - Boebert, column 3 lines 26-29, an inserted trusted path between 
input/output devices and work station is a secure communication protocol between the system 
and data interception. 

It would have been obvious to one of ordinary skill in the art at the time of the invention 
to incorporate the secure communication between input device and system of Boebert with the 
behavioral biometric based system of Brown because it would deter malicious hard ware or 
software from emulating and listening to the communication path between the user and system - 
Boebert, column 1 lines 30-35. 

Conclusion 

9. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Simon Kanaan whose telephone number is (571)270-3906. The 
examiner can normally be reached on Mon-Thurs 7:30-5:00 EST. 

If attempts to reach the above noted Examiner by telephone are unsuccessful, the 
Examiner's supervisor, Gilberto Barron, can be reached at the following telephone number: 
(571)272-3799. 
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The fax phone number for the organization where this application or proceeding is 
assigned is 571-273-8300. Information regarding the status of an application may be obtained 
from the Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. Status 
information for unpublished applications is available through Private PAIR only. For more 
information about the PAIR system, see http://pair-direct.uspto.gov. Should you have questions 
on access to the Private PAIR system, contact the Electronic Business Center (EBC) at 866-217- 
9197 (toll-free). 

/SIMON KANAAN/ 
Examiner, Art Unit 2432 



/Gilberto Barron Jr./ 

Supervisory Patent Examiner, Art Unit 2432 



